← Database

CVE-2008-2942

MEDIUM CVSS: 6.8 Published: 2008-06-30 Modified: 2026-06-16

Description

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.

Affected Platforms

Mercurial Mercurial

Weakness Type

CWE-22

References